"Rob has insight that few others have and that alone is worth the cost of the the course."- Chris Spurrier, Xerox Corp

"This course is filling in the blanks in my knowledge of how some things work. It is nice to know what the tools are doing."- Douglas Couch, Purdue University

"A great course on timeline, registry, and restore point forensics. SANS is continuing to be the leader on teaching new techniques happening with forensics."- Brad Garnett, Gibson County Sherrif's Dept.